stubbles/dbal

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although a recent release exists, the lack of recent source activity raises maintenance risk.

Repo popularitycaution

The repository has zero stars and one fork, indicating a very small public user and contributor base. Popularity is supporting evidence rather than a verdict, but this limits external validation.

Security policycaution

The repository has no security policy. This is a transparency gap for a database library, though it is not evidence that the package is unsafe.

Workflow auditcaution

The sole workflow was fully analyzed with no reported audit findings or untrusted checkout and script-injection paths. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.